Security & trust
What we keep, and what we don’t.
Each RAVIONIX tool keeps only what it needs to work, and this page says what that is for the tools that are live today. Some of it you can check yourself: watch the network traffic and you'll see a password never leaves your browser, only its hash. The rest describes how our servers are built.
RAVIONIX is not currently SOC 2 or ISO 27001 certified, and no completed third-party attestation is implied. No controls have been independently assessed and no penetration test has been done yet. The Trust Center documents the current controls and certification roadmap.
Raw content is processed, not stored
Raw URLs and messages are processed transiently to produce a verdict and are not stored in the RAVIONIX database. Analysis involves an AI provider. We keep a one-way hash, the verdict and the AI's reasoning, plus required operational metadata. If a check is rated a scam with 80%+ confidence, we also keep the website's domain name, never linked to you.
Passwords never leave the device
Your browser hashes the password; we receive only the hash and send Have I Been Pwned just its first 5 characters. Only that 5-character prefix is kept.
Locked audit log
A database trigger blocks edits and deletes. Entries are kept for up to two years and removed only by a scheduled retention job.
Export and delete your data
Account holders can export or delete their data from settings, without contacting support. The same tools serve California privacy requests.
How it’s built today
How the live tools work right now.
Raw content is not stored
Processed to produce a verdict, never stored by us (our AI provider may keep it up to 30 days for safety review). We keep a hash, the verdict and the AI's reason, plus the site name of links rated a scam with 80%+ confidence, never linked to you
Passwords never leave the device
Hashed in the browser, checked by k-anonymity
Every agent run recorded
Schema-validated output; cached and non-reasoning checks skip the model entirely
Export and delete your data
Account holders can do it from settings, without contacting support
WCAG 2.2 AA target
We work toward WCAG 2.2 AA and fix accessibility issues as we find them. Not independently audited yet.
Everything above describes how RAVIONIX Scanner works today.
In development
RAVIONIX AI Guard
AI Guard isn’t released yet, so these are design goals, not tested claims. When it launches, this section will say what the released version really does.
About AI Guard- Designed to work offline, with no uploads and no telemetry.
- Designed never to read your AI conversations or chat history.
- Designed never to show or save a full secret.
- Designed never to run the tools it inspects.